PSS: Add interactive confirmation of state storage provider trust when initialising a state store for the first time#38395

Open

SarahFrench wants to merge 14 commits intomainfrom

pss/TF-33680-interactive-confirm-pss-providers

Commits on Apr 28, 2026

test: Remove temporary test case; it'll now be replaced with tests using the new newMockProviderSourceUsingTestHttpServer method
SarahFrench
committed
refactor: Replace use of prepareInstallerEvents method. This will allow finer control of callbacks when implementing security related features
SarahFrench
committed
refactor: Remove unused prepareInstallerEvents method
SarahFrench
committed
feat: Users are prompted to approve a provider used for PSS on first use, and only if downloaded via HTTP.
SarahFrench
committed
Prefer "state storage" over "pluggable state storage"
SarahFrench
committed
Add signer details to the prompt shown to users
SarahFrench
committed
update user prompt to include key ID data
SarahFrench
committed
Remove unused (*PackageAuthenticationResult) SignedByHashiCorpPartner method
SarahFrench
committed
fix: Return correct auth result from getProvidersFromConfig, update test
SarahFrench
committed
test: Users see "Authentication: unauthenticated" in prompt if network mirror doesn't include hashes
SarahFrench
committed
rename test cases
SarahFrench
committed
refactor: Simplify how we prepare installation event callbacks by defining reused callbacks

SarahFrench
and
Copilot
committed
refactor: Update `getProvidersFromState` to use the shared callbacks
SarahFrench
committed

Commits on Apr 29, 2026

fix borked code comment
SarahFrench
committed